hashMonitor

Description: While I love tools lke @DumpMon, I am generally only concerned with pulling hashes for enhancing wordlists or to practice cracking passwords. I am not interested in the email addresses associated with these accounts, or any other information like phone numbers, names, etc. hashMonitor allows me to gather hashes from these breeches without exposing myself to other data.

hashMonitor is a tool I created to monitor twitter accounts that link to data breaches like @Dumpmon and @PastebinDorks. hashMonitor will check each link that these accounts link to, to see if there are any MD5, SHA1, or SHA256 hashes. If hashes are found it will add them to a sqlite database. hashMonitor tracks what URLs and hashes it has already seen and skips them. Once hashes are in the database hashMonitor can output the hashes to screen or an output file for your cracking pleasures.

Current Versions is 0.2

Installation:

As this is a python script you will need to ensure you have the correct version of python, which for this script is python 2.7. I used mostly standard libraries, but just incase you don't have them, here are the libraries that are required: sqlite3, re, datetime, httplib2, argparse, sys.

hashMonitor is a tool that will collect hashes from data breeches reported via

Twitter

optional arguments:

-h, --help show this help message and exit

-d DATABASE, --database DATABASE

This option is used to specify a database name.

./hashMonitor.py -d databaseName.db

-o OUTPUT, --output OUTPUT

This option will output the results to a file.

./hashMonitor.py -o output.txt

-l LIST, --list LIST This option will return a list of all the hashes in

the database. Use ALL, MD5, SHA1, or SHA256.

./hashMonitor.py -l MD5

-s, --summary This option will display stats on URLs scanned and

Hashes collected ./hashMonitor.py -s

-a ADD, --add ADD This option will add a twitter account to the monitor

db ./hashMonitor.py -a TWITTERHANDLE

-r REMOVE, --remove REMOVE

This option will remove hashes from the database from

any text base file that includes hashes like a .pot

file ./hashMonitor.py -r hascat.pot

From the help command you will notice we have a few options when running this program. None of the arguments are required though. Simply running the script will run the collection with default options.